content-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze data from untrusted external sources, creating a surface for indirect prompt injection attacks. Any malicious instructions embedded in these external data sources could potentially influence the agent's behavior during the analysis phase.
- Ingestion points: The agent is directed to process keyword exports (Ahrefs, SEMrush, GSC), sales call transcripts, survey responses, and content scraped from public forums like Reddit and Quora, as well as competitor blogs (found in SKILL.md under the 'Content Ideation Sources' section).
- Boundary markers: The skill lacks explicit instructions or delimiters (such as XML tags or clear 'ignore instructions' warnings) to prevent the agent from following malicious commands that might be embedded in these external sources.
- Capability inventory: The agent has the capability to perform web searches, read local configuration files (e.g., product-marketing.md), and chain to other skills such as 'seo-audit', 'social', and 'programmatic-seo', providing a pathway for injected instructions to affect downstream tasks.
- Sanitization: No validation or sanitization routines are defined to filter or escape potential instructions found within the processed text data.
Audit Metadata